Two hackers, one Sony: the company was the victim of a conflict of cybercriminals

CarderPlanet

Professional
Messages
2,552
Reaction score
675
Points
83
Two cybercriminals claimed to have hacked Sony at once, but there is only one real hacker.

Sony has launched an investigation into an alleged data security breach after ransomware group RansomedVC claimed to have hacked the company's systems. Sony confirmed that it is currently investigating the circumstances of the incident and is not yet ready to comment further.

The RansomedVC group published some files as evidence of hacking, but it is not yet clear whether the attackers managed to compromise all the company's systems. It is worth noting that RansomedVC does not use malware to encrypt data on victims ' networks.

4ebf7fx261va50c75l8h23yb095j1ex1.png

Sony report onRansomedVC

On its leak site, the group stated that hackers have successfully breached all Sony systems and will not demand a ransom. The attackers claim that they will sell the data, as Sony "does not want to pay" despite the fact that, as the hackers said, no ransom demands were made for the company. The RansomedVC group told BleepingComputer that it stole 260 GB of data from Sony networks and is trying to sell the stolen information for $2.5 million.

However, the situation is complicated by the fact that another cybercriminal under the pseudonym MajorNelson also claims to be behind this attack, and claims that the RansomedVC hackers are lying and are scammers.

MajorNelson has published a 2.4 GB archive that contains 3.14 GB of uncompressed data, which he says belongs to Sony. The archive contains credentials for internal systems, files related to SonarQube, Creators Cloud, Sony certificates, and more.

1tvh6ctxl4qemdkvf0iq9k0bxyhfqnhi.png

MajorNelson's message with accusations against RansomedVC and stolen information

BleepingComputer noted that the MajorNelson archive contains all the files from a small sample of RansomedVC, but the final determination of the cracker remains a difficult task. Although the data provided does belong to Sony, BleepingComputer could not verify the accuracy of the claims of each of the participants in the threat.
 
Top